Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/6i-C8SR9qj7qt_wE_RP6sdQyUPc.roa
File: 6i-C8SR9qj7qt_wE_RP6sdQyUPc.roa (raw, json)
Hash identifier: jzxyzDRysu5EmBVMDSl9X3yotnuDuYD+8LTisxQIl/M=
Subject key identifier: EA:2F:82:F1:24:7D:AA:3E:EA:B7:FC:04:FD:13:FA:B1:D4:32:50:F7
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 018CC72743C5077975EE1D5FC0F32F3F7394
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/6i-C8SR9qj7qt_wE_RP6sdQyUPc.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 193.56.233.0/24 maxlen: 24
193.56.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:43:c5:07:79:75:ee:1d:5f:c0:f3:2f:3f:73:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea2f82f1247daa3eeab7fc04fd13fab1d43250f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:e4:0e:a5:62:79:92:a7:2c:69:d2:eb:2e:
da:e9:ed:2c:5a:18:b6:54:d7:35:09:a3:f6:91:23:
66:24:15:99:98:af:ca:ac:64:52:5c:1f:36:83:82:
06:8d:8b:70:6f:71:59:b1:91:d0:2f:2f:5e:55:26:
c5:dd:ab:b9:d5:96:d7:4b:ec:97:86:b4:bb:4b:19:
3a:88:d5:a7:46:4c:39:52:6d:44:a5:67:d4:c2:a0:
7b:13:8f:9f:ee:dc:f6:6e:f2:c0:cd:eb:a0:00:d8:
41:a4:6c:88:e3:59:f5:1e:8d:91:4c:e6:3b:d2:4a:
27:ae:0c:4c:96:37:c2:02:63:b6:3f:76:99:38:60:
6b:ee:b5:8d:36:7e:4b:be:f6:1e:a5:42:59:fa:ce:
24:c8:af:0a:be:60:b8:89:3d:5e:d9:07:44:ce:99:
ae:ed:96:4f:cd:b8:b8:f7:4e:9f:8b:41:74:44:40:
ac:36:24:c8:bb:16:78:1c:2b:46:62:44:66:31:87:
ad:55:20:ec:0f:0c:89:e3:e0:6b:f6:4f:c9:80:2e:
e9:1d:57:c8:91:c5:99:77:1d:45:df:51:0a:9b:c6:
48:0e:e6:81:62:87:04:79:3d:1f:ed:03:ad:f4:8b:
67:67:c3:c8:c8:b2:e3:44:25:79:63:04:6f:e5:e0:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2F:82:F1:24:7D:AA:3E:EA:B7:FC:04:FD:13:FA:B1:D4:32:50:F7
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/6i-C8SR9qj7qt_wE_RP6sdQyUPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.233.0/24
193.56.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:50:73:25:1e:ac:da:d0:bc:7f:31:22:45:5c:88:4b:fd:18:
ff:c5:c2:3c:9e:07:c5:c3:93:07:57:1d:bb:f2:90:63:4f:44:
c8:50:fa:95:cd:ee:5e:d0:70:66:78:51:1f:e3:23:7e:cd:cb:
78:11:40:5d:74:8f:d6:a7:b8:f9:c3:22:ee:31:17:4e:1a:05:
5c:d8:fd:44:04:eb:5c:15:a6:2b:be:de:e1:ef:84:8a:4e:c3:
df:9a:bb:59:08:13:db:60:ba:da:29:db:30:1a:7f:ac:e9:4d:
af:0d:6b:49:6d:0d:da:97:ec:16:f1:5e:5b:81:65:28:17:07:
55:c8:fb:f4:4c:14:05:ed:52:ea:25:6e:62:c7:0a:2b:e7:db:
54:68:1c:4c:85:27:51:b9:17:6b:c3:25:74:03:17:9f:e1:5a:
ca:5f:93:19:81:50:fb:d2:7e:1c:a6:38:63:42:62:06:a7:c5:
70:52:27:7e:2d:57:92:b4:44:83:2c:4a:7b:20:c8:4b:87:45:
c8:cb:5e:b8:60:1c:84:d1:de:4a:3b:7b:ae:ba:8b:c3:bd:9a:
0e:ed:f6:12:cb:b2:f5:15:2d:0b:e4:5e:7b:46:97:d9:06:8c:
b6:8b:e1:02:92:7a:0d:c0:80:61:50:a2:86:6c:6a:39:69:20:
c5:e5:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:11:19 2024 by rpki-client on console-ams.rpki-client.org